If the EPIRB is automatically activated on release of the HRU it is not a manually activated EPIRB. When inspecting the auto EPIRB in it's case, it has to be lifted up to see if the lights come on. It then has to be immediately switched off before the signal gets to the COPAS satellites and place back in its set position.
In the case of Estonia, the Rockwater Surveyors discovered that both EPIRB cages were empty and one HRU was recovered.
Now, if someone knew how to open the EPIRB cage to grab hold of the manual EPPIRB then they would have also known that if there is no small flashing standby light then it is switched off. Anyone with the authority to take out the EPIRB would know to (a) switch it on and (b) chuck it in the water.
So, the EPIRB's were ejected by the HRU's. They were found switched off and untuned off the coast of Estonia.
Their batteries were not flat but fully charge. Logs show they had been recently inspected by the ship's electricians. This inspection involves ensuring the networks are connected and tuned. The Estonia EPIRBS were (a) switched off and (b) not tuned, despite all indications of good care of the product (full battery) and with an HRU.
This leads to the point that given there was a paucity of communications between 01:00 and 01:54 and the EPIRB's being switched off despite being successfully ejected, if not activated for some reason, then the question has to be asked, who turned them off, or removed them from the satisfactory operating condition they were in when inspected the week before.
This all seems to add up to the billet-doux sent out by a party with a message, together with the sinking at Swedish midnight and at the halfway point in the journey, together with ensuring Stockholm Coastguard did not get the Mayday until almost an hour later.